Unrated
Security advisory
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2023-34439
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 22:31 UTC · Revision 1
Source evidence
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
osv:CVE-2023-34439
Complete source record
{
"id": "aec2cf8a892ae320257585d7c269a222a98014c5c86857325ea807b1c77be4f4",
"url": "https://osv.dev/vulnerability/CVE-2023-34439",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2023-34439",
"summary": "Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.",
"evidence": "osv:CVE-2023-34439",
"products": [],
"severity": "unknown",
"structured": {
"id": "CVE-2023-34439",
"aliases": [
"CVE-2023-34439"
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/implem/implem.pleasanter",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "9b5d8ec3a927f3887a0fdb93bb64b1cad5980609"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.3.48.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"Pleasanter_1.3.47.0",
"Pleasanter_1.3.46.1",
"Pleasanter_1.3.46.0",
"Pleasanter_1.3.45.0",
"Pleasanter_1.3.44.0",
"Pleasanter_1.3.43.0",
"Pleasanter_1.3.42.1",
"Pleasanter_1.3.42.0",
"Pleasanter_1.3.41.0",
"Pleasanter_1.3.40.2",
"Pleasanter_1.3.40.1",
"Pleasanter_1.3.40.0",
"Pleasanter_1.3.39.2",
"Pleasanter_1.3.39.1",
"Pleasanter_1.3.39.0",
"Pleasanter_1.3.38.3",
"Pleasanter_1.3.38.2",
"Pleasanter_1.3.38.1",
"Pleasanter_1.3.38.0",
"Pleasanter_1.3.37.3",
"Pleasanter_1.3.37.2",
"Pleasanter_1.3.37.1",
"Pleasanter_1.3.37.0",
"Pleasanter_1.3.36.0",
"Pleasanter_1.3.35.1",
"Pleasanter_1.3.35.0",
"Pleasanter_1.3.34.0",
"Pleasanter_1.3.33.0",
"Pleasanter_1.3.32.0",
"Pleasanter_1.3.31.0",
"Pleasanter_1.3.30.1",
"Pleasanter_1.3.30.0",
"Pleasanter_1.3.29.2",
"Pleasanter_1.3.29.1",
"Pleasanter_1.3.29.0",
"Pleasanter_1.3.28.0",
"Pleasanter_1.3.27.1",
"Pleasanter_1.3.27.0",
"Pleasanter_1.3.26.1",
"Pleasanter_1.3.26.0",
"Pleasanter_1.3.25.3",
"Pleasanter_1.3.25.2",
"Pleasanter_1.3.25.1",
"Pleasanter_1.3.25.0",
"Pleasanter_1.3.24.0",
"Pleasanter_1.3.23.0",
"Pleasanter_1.3.22.0",
"Pleasanter_1.3.21.0",
"Pleasanter_1.3.20.0",
"Pleasanter_1.3.19.0",
"Pleasanter_1.3.18.0",
"Pleasanter_1.3.17.1",
"Pleasanter_1.3.17.0",
"Pleasanter_1.3.16.3",
"Pleasanter_1.3.16.2",
"Pleasanter_1.3.16.1",
"Pleasanter_1.3.16.0",
"Pleasanter_1.3.15.1",
"Pleasanter_1.3.15.0",
"Pleasanter_1.3.14.0",
"Pleasanter_1.3.13.0",
"Pleasanter_1.3.12.0",
"Pleasanter_1.3.11.2",
"Pleasanter_1.3.11.1",
"Pleasanter_1.3.11.0",
"Pleasanter_1.3.10.0",
"Pleasanter_1.3.9.1",
"Pleasanter_1.3.9.0",
"Pleasanter_1.3.8.0",
"Pleasanter_1.3.7.1",
"Pleasanter_1.3.7.0",
"Pleasanter_1.3.6.0",
"Pleasanter_1.3.5.1",
"Pleasanter_1.3.5.0",
"Pleasanter_1.3.4.2",
"Pleasanter_1.3.4.1",
"Pleasanter_1.3.4.0",
"Pleasanter_1.3.3.3",
"Pleasanter_1.3.3.2",
"Pleasanter_1.3.3.1",
"Pleasanter_1.3.3.0",
"Pleasanter_1.3.2.1",
"Pleasanter_1.3.2.0",
"Pleasanter_1.3.1.2",
"Pleasanter_1.3.1.1",
"Pleasanter_1.3.1.0",
"Pleasanter_1.3.0.1",
"Pleasanter_1.3.0.0",
"Pleasanter_1.2.29.4",
"Pleasanter_1.2.29.3",
"Pleasanter_1.2.29.2",
"Pleasanter_1.2.29.1",
"Pleasanter_1.2.29.0",
"Pleasanter_1.2.28.1",
"Pleasanter_1.2.28.0",
"Pleasanter_1.2.27.2",
"Pleasanter_1.2.27.1",
"Pleasanter_1.2.27.0",
"Pleasanter_1.2.26.2",
"Pleasanter_1.2.26.1",
"Pleasanter_1.2.26.0",
"Pleasanter_1.2.25.1",
"Pleasanter_1.2.25.0",
"Pleasanter_1.2.24.2",
"Pleasanter_1.2.24.1",
"Pleasanter_1.2.24.0",
"Pleasanter_1.2.23.0",
"Pleasanter_1.2.22.1",
"Pleasanter_1.2.22.0",
"Pleasanter_1.2.21.0",
"Pleasanter_1.2.20.0",
"Pleasanter_1.2.19.0",
"Pleasanter_1.2.18.0",
"Pleasanter_1.2.17.0",
"Pleasanter_1.2.16.0",
"Pleasanter_1.2.15.0",
"Pleasanter_1.2.14.1",
"Pleasanter_1.2.14.0",
"Pleasanter_1.2.12.0",
"Pleasanter_1.2.11.0",
"Pleasanter_1.2.10.0",
"Pleasante_1.2.22.0",
"Pleasante_1.2.21.0",
"Pleasante_1.2.20.0",
"Pleasante_1.2.19.0",
"Pleasante_1.2.18.0",
"Pleasante_1.2.17.0",
"Pleasante_1.2.16.0",
"Pleasante_1.2.15.0",
"Pleasante_1.2.14.1",
"Pleasante_1.2.14.0",
"Pleasanter_1.2.13.0",
"Pleasante_1.2.12.0",
"Pleasante_1.2.11.0",
"Pleasante_1.2.10.0",
"Release_1_1_14_0",
"Release_1_1_13_0",
"Release_1_1_12_2",
"Release_1_1_12_1",
"Release_1_1_12_0",
"Release_1_1_11_0",
"Release_1_1_10_1",
"Release_1190",
"Release_1151-1",
"Release_1151",
"Release_1141",
"Release_1150"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34439.json"
}
}
],
"modified": "2026-10-28T02:30:31.926800354Z",
"provider": "osv",
"references": [
"https://jvn.jp/en/jp/JVN96209256/",
"https://pleasanter.org/archives/vulnerability-update-202311",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34439.json",
"https://nvd.nist.gov/vuln/detail/CVE-2023-34439"
],
"provider_metadata": {
"cna_assigner": "jpcert",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"last_affected": "1.3.47.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "VersionTextExtraction"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34439.json"
}
},
"related_cves": [
{
"value": "CVE-2023-34439",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 499152,
"published_at": "2023-12-06T08:40:53.373+00:00"
}